Privacy Policy

Privacy policy

We are very pleased about your interest in the International Congress on Borderline Personality Disorder and Allied Disorders. Data protection and privacy are very important for the European Society for the Study of Personality Disorders ("ESSPD") and the management of the CPO HANSER SERVICE Hanser & Co GmbH ("CPO"). In this privacy policy we are using the following terms according to their definition in Article 4 of the General Data Protection Regulation (GDPR): personal data, data subject, processing, restriction of processing, profiling, pseudonymisation, filing system, controller, processor, recipient, third party, consent, supervisory authority.

During a visit of our websites generally some personal data, for example the IP address of the computer system used, is stored in server log files. More information about this data can be found at Recording of general data and information. Insofar as a data subject wants to make use of special services offered by us on our websites, a more extensive processing additional personal data may become necessary. We generally ask for the consent of the data subject before processing personal data if the processing is not based on legal obligations.

Upon visiting our websites our servers are recording a set of general data and information. This set of general data and information is stored in server log files. The following information may be recorded: (1) the Internet browser and browser version used, (2) the operating system of the computer system used, (3) the website that referred to our website (referrer), (4) the sub pages that are accessed on our website, (5) time and date of the access to our website, (6) an internet protocol address (IP address), (7) the internet service provider of the accessing system and (8) or any other similar data and information, which may be used to protect our information technology system against danger in the case of an cyber attack.

When using this general data and information we are not drawing any conclusion on the directly affected data subject. Furthermore, this information is necessary to (1) deliver the contents of our websites correctly, (2) optimize the contents of our websites and the respective advertising without individualisation, (3) guarantee the long-term operational liability of our information technology systems and our websites as well as (4) provide necessary information for prosecution to law enforcement authorities in the case of a cyber attack.

The recorded sets of data and information are processed statistically and beyond that to improve data protection and data security in our organisation to finally guarantee an optimum level of data protection for all processed personal data. This optimization is a legitimate interest according to Article 6(1)(f) GDPR. This data is stored separately from all other personal data provided by the data subject and is deleted 14 days after the data subjects' access to our website.

Cookies

Our websites are using cookies. Cookies are text files, which are stored and saved on a computer system via an Internet browser.

Cookies allow us to provide user friendly services for the visitors of our websites which would not be possible without setting cookies. Cookies are not utilized for profiling or automate decision making purposes.

Returning visitors of our websites can be recognized as such by using cookies. Services and particular functions which have been employed before by the visitor of our websites can be identified. The intention of this recognition is to ease the use of our websites.

The data subject may contradict the usage of cookies on our websites permanently by disabling cookies in the Internet browser used. Furthermore, already set cookies can be deleted through the Internet browser or other software tools. This is possible for all common Internet browsers. The services and functions of our websites might not be usable to the full extent if cookies are disabled in the Internet browser.

The following cookies are used by our websites:

(a) Session cookies

These are temporary cookies that are stored for the duration of your visit only. They will be deleted when the Internet browser used is closed.

We are using these cookies for special services, such as the registration for events, the submission of abstracts or application for memberships, to record the status of the current process.

(b) Permanent cookies

These cookies are stored to the cookie file of your Internet browser even when the browser has been closed. Permanent cookies are utilized when the website operator needs to know the website users beyond a single visit.

We are using these kinds of cookies (1) when you login to protected areas of our websites and agree to stay logged in, (2) to inform you about our cookie policies and the newsletter only during your first visit on this website. Furthermore, we set these cookies, if you agree to the anonymized tracking of your user behaviour on this website (First-party cookies).

In case (1) a pseudonym (session ID or access token), relating to your account, will be stored in the cookie. These cookies will be deleted thirty days after creation. In case (2) no personal data will be recorded, but the date when you have accepted the cookie policies or rather have taken note of the newsletter information. These cookies are stored in the cookie file of your Internet browser until you deleted it or the we are making changes to our cookies policies or newsletter information and ask you for your confirmation or perusal.

(c) First-party cookies

We are using these cookies to understand more about the visitors journey on our website. Data subjects are assigned a unique identifier in the cookie, which enables us to identify returning visitors. We are using these cookies to be able to statistically evaluate the page visits on our websites and to optimize the advertising for our websites.

These cookies are only set if you agree to allow us to utilize the advertising and analysis services Google Analytics, Google AdSense or Google Remarketing on this website. A given approval can be revoked at http://tools.google.com/dlpage/gaoptout for all formerly mentioned Google services at any time.

(d) Third-party cookies

These cookies are set by third-parties, such as social networks and advertising services, to record your visits on several websites. We have no influence on the placement and content of these third-party cookies. You can prevent the placement of these cookies by disabling cookies in your Internet browser.

Contacting us via our website

Due to statutory obligations our websites provide contact information to electronically contact our organization rapidly and allow a direct communication with us. This also includes the provision of a public e-mail address. If a data subject contacts us via e-mail or a provided contact form, the transmitted personal data will be saved automatically. This personal data is transmitted to us on a voluntary basis and is processed by us for contacting reasons only and will not be distributed to third parties.

Newsletter registration

Our websites offer the opportunity to register for a newsletter about our services, such as memberships, congresses, conferences and education programms, to our website visitors. Which kinds of personal data are transmitted to the controller for different newsletters depends on the provided registration forms.

We periodically inform our customers and business partners about our offers and services through newsletters. Our newsletters can generally be received by a data subject if (1) the data subject provides a valid e-mail address and (2) the data subject registers for the newsletter self-reliantly. Using double opt-in procedures, we are sending out a validation e-mail to the e-mail address that has been provided by the data subject during the registration for newsletters for legal reasons. This validation e-mail is intended to verify that the owner of the provided e-mail address gives his consent to the newsletter registration as a data subject.

During the newsletter registration we are processing the IP address that is assigned by the internet service provider (ISP) to the computer system used during the registration by the data subject, along with the date and time of registration. This data processing is necessary to trace a possible abuse of the data subject's e-mail address at a later time and, therefore, serves for our legal protection.

All personal data that is processed for the newsletter registration are solely used for sending our newsletters to the registered recipients. We are offering several newsletters to subscribe to, such us newsletters for different congresses, conferences or services. The personal data of a data subject that has been provided for the subscription to a specific newsletter will categorically be used only to send out these specific newsletters. The data will not be used for any additional newsletters. Furthermore, newsletter subscribers may be informed about changes by e-mail to the registered e-mail address, if required for operational or registration purposes of the newsletter service, as well as for technical changes. The provided personal data will not be transferred to third-parties, except processors of the newsletter sendings. You can unsubscribe from our newsletter at any time. Your consent to the processing of your personal data can be revoked at any time, too. To revoke your consent and to unsubscribe from our newsletters please use the unsubscribe link, which can be found in every newsletter we send. Furthermore, you can unsubscribe from the newsletter by entering the e-mail address, which is registered for the newsletter, in the unsubscribe form on our website. Beyond that a subject may revoke the consent for the data processing by sending us a written notice.

The data for the newsletter sending is processed by processors. We have contracted the following processors for the newsletter sending:

The IT infrastructure for the data storage and the newsletter sending is provided AGNITAS AG - e-mail & marketing automation, Werner-Eckert-Straße 6, 81829 München, Germany through the software tool EMM SaaS. Further information about the privacy policy and general conditions of this processor can be found at https://www.agnitas.de/datenschutzerklaerung/ and https://www.agnitas.de/agb/.

For the newsletter creation, as well as the maintenance of recipient lists, we contracted GLOBIT - Global Information Technology GmbH, Am AKKU 7, 22885 Barsbüttel, Germany. Further information about the privacy policy of this processor can be found at http://www.globit.com/privacy-policy/.

Newsletter tracking

Our newsletters contain so called tracking pixels. A tracking pixel is a miniature graphic, which is embedded to e-mails, that are sent in HTML format, to allow us to log and analyse newsletters. This is the basis for statistical evaluations of the success or failure of our e-mail marketing campaigns. On the basis of the a tracking pixel we can reproduce if, when and on which platform, for example PC, mobile phone or tablet, an e-mail has been opened by the data subject. Furthermore we are able to see which links have been clicked in the e-mail by the recipient.

The personal data that is collected through the usage of tracking pixels is processed by us to optimize the sending of newsletters and improve the contents of the newsletters according to the recipients' interests. This personal data will not be transferred to third-parties, except processors of the newsletter sendings. Data subjects are entitled to revoke the consent for the usage of tracking pixels in the newsletters, which has been given in the double opt-in registration for newsletters, at any time. After revoking your consent we will automatically delete all data of that kind. An unsubscription from the newsletter is considered a revocation of consent.

The consent to the newsletter tracking is given on a voluntary basis and can be revoked by the data subject through editing the newsletter recipient profile at any time. You can find a link to edit your profile in every newsletter.

Routine deletion and locking of personal data

We store and process your personal data only for the term that is needed to reach the purpose of the data storage and processing or terms that are required by European or other legislative or regulative authorities for the processing and storage of data by the controller or the purposes of storage and processing.

Once the purpose of the data storage and processing lapses or the storage period required by European or other legislative or regulative authorities expires, the personal data will routinely and in accordance with the legal regulations be locked for processing or deleted.

Rights of data subjects

Right to information According to Article 15 GDPR you have the right to demand a confirmation whether we process your personal data. Should we process your personal data you have the right to be informed about this personal data and further information, which are explained in Article 15 GDPR.

Right to rectification According to Article 16 GDPR you have the right to demand immediate rectification of incorrect personal data relating to you. Furthermore, taking into consideration the purposes of the processing you have the right to request the completion of incomplete personal data, also by means of a complementary declaration.

Right to erasure You have the right to demand that we delete all of your stored personal data immediately. We are obligated to delete personal data immediately, provided the conditions of Article 17 GDPR are met. For further information about the details of these conditions we refer to Article 17 GDPR.

Right to restriction of processing According to Article 18 GDPR you have the right to demand the restriction of processing of your personal data under certain circumstances.

Right to data portability According to Article 20 GDPR you have the right to receive your provided personal data in a structured, common and machine-readable format from us. Furthermore, you have the right to transmit this data to a controller of your choice without any obstruction by us, insofar the processing is based on a consent according to the Articles 6(1)(a) or 9(2)(a) GDPR, as well as it is based on a contract according to Article 6(1)(b) GDPR and the data is processed by the means of automated procedures.

Right to object According to Article 21 GDPR you have the right to object to the processing of your personal data that is based on the Articles 6(1)(e) or (f) GDPR. This also applies for a profiling based on these rules.

If we process your personal data for direct marketing purposes, you are entitled to object to the processing of your personal data for these purposes. This also applies for profiling that is linked to such direct marketing activities.

If you intend to exercise your given rights, please contact us - the controller - directly using the above stated contact information or choose one of the provided options to contact us on an alternative way to inform us. If you have any questions in this respect, please also contact us directly.

Right to logde a complaint with a supervisory authority According to Article 77 GDPR you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider the the processing of personal data relating to you infringes the GDPR.

Use and application of Google Analytics (with anonymizer function)

We have integrated the component of Google Analytics (with the anonymizer function) on this website. Google Analytics is a web analytics service. Web analytics is the collection, gathering, and analysis of data about the behavior of visitors to websites. A web analysis service collects, inter alia, data about the website from which a person has come (the so-called referrer), which sub-pages were visited, or how often and for what duration a sub-page was viewed. Web analytics are mainly used for the optimization of a website and in order to carry out a cost-benefit analysis of Internet advertising.

During the first visit of our websites we invite the data subject to consent the usage of Google Analytics. The data subject's activities on our websites are not recorded as long as the respective consent has not been given.

In addition, the data subject has the possibility of objecting to a collection of data that are generated by Google Analytics, which is related to the use of this website, as well as the processing of this data by Google and the chance to preclude any such. For this purpose, the data subject must download a browser add-on under the link http://tools.google.com/dlpage/gaoptout and install it. This browser add-on tells Google Analytics through a JavaScript, that any data and information about the visits of Internet pages may not be transmitted to Google Analytics. The installation of the browser add-ons is considered an objection by Google. If the information technology system of the data subject is later deleted, formatted, or newly installed, then the data subject must reinstall the browser add-ons to disable Google Analytics. If the browser add-on was uninstalled by the data subject or any other person who is attributable to their sphere of competence, or is disabled, it is possible to execute the reinstallation or reactivation of the browser add-ons.

If Google does not provide this Internet browser plugin for the Internet browser or IT system used for your visit, you can deactivate Google Analytics by using this Link: Deactivate Google Analytics. This deactivation only takes effect for the currently used IT system and for the currently used Internet browser

For the web analytics through Google Analytics we use the application "_gat. _anonymizeIp". By means of this application the IP address of the Internet connection of the data subject is abridged by Google and anonymised when accessing our websites from a Member State of the European Union or another Contracting State to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyze the traffic on our website. Google uses the collected data and information, inter alia, to evaluate the use of our website and to provide online reports, which show the activities on our websites, and to provide other services concerning the use of our Internet site for us. This purpose is considered a legitimate interest according to Article 6(1)(f) GDPR.

Google Analytics places a cookie on the information technology system of the data subject. The definition of cookies is explained above. With the setting of the cookie, Google is enabled to analyze the use of our website. With each call-up to one of the individual pages of this Internet site, which is operated by the controller and into which a Google Analytics component was integrated, the Internet browser on the information technology system of the data subject will automatically submit data through the Google Analytics component for the purpose of online advertising and the settlement of commissions to Google. During the course of this technical procedure, the enterprise Google gains knowledge of personal information, such as the IP address of the data subject, which serves Google, inter alia, to understand the origin of visitors and clicks, and subsequently create commission settlements.

The cookie is used to store personal information, such as the access time, the location from which the access was made, and the frequency of visits of our website by the data subject. With each visit to our Internet site, such personal data, including the IP address of the Internet access used by the data subject, will be transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass these personal data collected through the technical procedure to third parties.

The data subject may, as stated above, prevent the setting of cookies through our website at any time by means of a corresponding adjustment of the web browser used and thus permanently deny the setting of cookies. Such an adjustment to the Internet browser used would also prevent Google Analytics from setting a cookie on the information technology system of the data subject. In addition, cookies already in use by Google Analytics may be deleted at any time via a web browser or other software programs.

Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.com/intl/en/policies/privacy/ and under http://www.google.com/analytics/terms/us.html. Google Analytics is further explained under the following Link https://www.google.com/analytics/.

Alphabet Inc. and its subsidiaries (e.g. Google LLC) comply the requirements of the EU-U.S. Privacy Shield Framework, as well as the Suisse-US Privacy Shield Framework. Further information about these treaties may be retrieved under https://www.privacyshield.gov/.

Automated decision making and profiling

We process your data responsibly and neither use automated decision making nor profiling.